
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft
File: qZ9mmGknIBFUlstFlwLEOtxI1q0.mft (raw, json)
Hash identifier: 1sPNcOEywSXSfBY2lE1dvHmNnMuBLPyz7QNNeWF+4WM=
Subject key identifier: A6:59:A6:00:56:A4:4D:FB:A8:EC:CE:2B:8A:CC:58:F6:7A:F1:F7:CC
Authority key identifier: A9:9F:66:98:69:27:20:11:54:96:CB:45:97:02:C4:3A:DC:48:D6:AD
Certificate issuer: /CN=A91CACCA/serialNumber=A99F6698692720115496CB459702C43ADC48D6AD
Certificate serial: 357F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZ9mmGknIBFUlstFlwLEOtxI1q0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft
Manifest number: 357F
Signing time: Thu 24 Sep 2026 15:12:56 +0000
Manifest this update: Thu 24 Sep 2026 15:12:55 +0000
Manifest next update: Thu 01 Oct 2026 15:12:55 +0000
Files and hashes: 1: qZ9mmGknIBFUlstFlwLEOtxI1q0.crl (hash: 9XYLa5GxpBmnrK+1wzCvWZyEUDfujExvEvehHVx69zc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.crl
rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZ9mmGknIBFUlstFlwLEOtxI1q0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 15:12:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13695 (0x357f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CACCA, serialNumber=A99F6698692720115496CB459702C43ADC48D6AD
Validity
Not Before: Sep 24 15:12:55 2026 GMT
Not After : Oct 1 15:12:55 2026 GMT
Subject: CN=6ab53df8-fe90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bf:d2:47:f0:ee:41:c2:77:d2:fd:ad:6f:ad:
51:db:51:3f:67:7c:f5:5d:9f:d2:83:44:93:6a:a4:
43:a4:b3:9b:d1:de:b4:aa:a3:cd:87:97:01:55:2f:
11:cc:44:99:d5:22:f0:8c:10:a1:d6:9b:3d:1f:80:
55:35:82:ba:93:bc:a4:70:33:0b:0b:80:b2:28:00:
3e:f4:57:29:99:1e:1f:d6:7c:2d:b9:01:2b:50:9e:
c9:ac:1c:a5:a6:cf:d9:32:31:d7:e9:84:18:30:2b:
a5:06:08:2d:c2:54:96:13:06:74:50:78:5c:d9:2b:
4d:c5:db:79:80:7e:6e:66:f4:af:4c:c9:df:b2:55:
4f:66:b9:90:eb:d0:1b:14:cc:72:04:3d:52:88:04:
57:2a:3d:5b:88:b8:fa:26:f7:06:e1:63:ca:27:28:
81:f5:a5:84:bf:16:a9:52:f6:27:22:7d:1a:d1:6d:
3b:75:77:5f:10:77:7d:22:b3:c0:e1:a7:5a:69:f3:
c5:b9:79:94:f6:2b:f1:3a:fa:4a:fd:c9:75:2e:ad:
d7:f6:f1:19:15:8f:7a:31:71:45:82:5a:1a:15:04:
22:9b:27:f2:bd:e2:a4:77:b7:86:ef:a1:86:e7:bb:
a7:6f:8c:87:2d:b0:bc:7f:c3:42:f7:dd:1f:98:1b:
0f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:59:A6:00:56:A4:4D:FB:A8:EC:CE:2B:8A:CC:58:F6:7A:F1:F7:CC
X509v3 Authority Key Identifier:
keyid:A9:9F:66:98:69:27:20:11:54:96:CB:45:97:02:C4:3A:DC:48:D6:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZ9mmGknIBFUlstFlwLEOtxI1q0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:34:47:2f:aa:31:96:5c:e8:f3:d2:04:1d:fb:fa:55:18:b9:
41:58:79:06:24:aa:76:61:ac:9d:99:57:cc:30:2c:0f:da:e0:
59:16:9c:51:1c:45:f4:3c:cc:21:81:b9:80:4c:a2:5c:6f:cb:
f1:44:cf:98:32:5b:c8:5d:1d:b3:2f:70:7e:cf:34:3d:5b:d0:
fe:68:a7:48:3a:26:70:a0:57:d7:9c:75:6b:c0:7d:a0:38:ab:
e6:3b:66:5a:b9:b5:ae:de:1d:f4:4e:17:0f:42:0c:c7:c5:64:
1c:bb:54:a0:ba:08:77:50:fe:c2:16:62:3b:0e:21:a9:a6:7e:
c2:58:c2:08:0c:41:30:ab:ef:9a:cf:6d:fd:a2:06:05:c1:2c:
0f:be:c7:67:50:df:b2:b5:06:eb:c7:53:2a:65:3f:33:75:51:
0a:63:38:82:c1:07:40:23:ab:d8:d7:67:0f:bf:fa:3b:b0:99:
9b:1e:b8:c2:7c:5a:f1:bb:94:dc:d4:c4:be:55:39:c8:77:0b:
49:1a:11:6d:dc:b0:4e:37:bf:c0:95:86:d8:73:58:86:c4:d3:
a8:b9:6b:aa:b9:68:07:2b:63:e7:8f:82:a1:15:b2:b8:71:d5:
e9:25:a4:b3:c3:55:d9:4d:cb:99:e3:c5:f2:c6:a7:b0:25:74:
6d:08:ec:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:09:47 2026 by rpki-client